Administration:Creating a CVRG Host Certificate

From CVRG Wiki

Creating a Host Certificate using the CVRG UI

The following steps show how a CVRG CA Administrator would go about creating a host certificate for a system that has been approved to house a CVRG-centric application or utility. Screenshots are provided to help with the process.

Running the CVRG UI

1. Open a console window
2. Checkout the CVRG_DEV_Software_Stack from svn. The directory you have chosen to checkout to will from here be called CVRG_DEV_LOCATION.
   1. svn checkout https://project.bmi.ohio-state.edu/svn/cvrg/trunk/dev
   2. Use Tigris TortoiseSVN tool for Windows: http://tortoisesvn.tigris.org/
3. Change directory to the ${CVRG_DEV_LOCATION}
   1. cd ${CVRG_DEV_LOCATION}\applications\cvrg-ui
4. Start the CVRG UI Application
   1. ant ui
5. The following screen will be seen.
   1. Change the Delegation Path Length to 3
   2. Enter your UserId and Password
   3. Click the "Authenticate" Button

4. After you have successfully authenticated the following screen will show up. By carrying out the steps below your proxy will be stored in (${UserHome}\.cagrid\proxy) where user home can either be C:\Document and Settings/UserName (windows) or /home/UserName (Linux)
   1. Click the "Set Default" Button
   2. Click "OK"
   3. Click the "Close" Button

   

   Requesting a host certificate

   1. Once you have started the CVRG UI and successfully authenticated do the following:
      1. On the menu bar - click "My Account"
      2. Scroll down and click "Request Host Certificate"

   

   2. Fill out the Request Host Certificate Form
      1. Enter the name of the host in the "Host" textbox (Remember the is the fully qualified domain name of the host such as somehost.somedomain.com)
      2. Click "Request Certificate"
      1. Notice the directory where the certificates will be saved namely in the example the (C:\Document and Settings\dlucas8\.cagrid\certificates). This value can be changed to any directory of your choosing. Upon requesting the certificate, if approved you will see a screen Host Certificate Request Report, you may also click the "View Certificate" button to see the newly created host certificate.

   
   

   3. Finally you may change to the directory where you have chosen to save the host certificates so that you may email them or place them where they are needed in order to secure a tomcat container for instance.